Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160
C H A P T E R
7-1
Cisco IronPort AsyncOS 8.0 for Security Management User Guide
7
Managing the Cisco IronPort Spam Quarantine
•
•
•
•
•
•
Understanding the Cisco IronPort Spam Quarantine
A Cisco IronPort Spam Quarantine holds spam and suspected spam messages for email users in your
organization. The spam quarantine provides a safeguard mechanism for organizations that are concerned
about “false positives” — that is, legitimate email messages that are quarantined or deleted as spam. This
feature allows end users and administrators to review messages that are flagged as spam before making
a final determination. In addition, if you enable the safelist/blocklist feature, end users (email users) can
exercise control over which messages are marked as spam.
organization. The spam quarantine provides a safeguard mechanism for organizations that are concerned
about “false positives” — that is, legitimate email messages that are quarantined or deleted as spam. This
feature allows end users and administrators to review messages that are flagged as spam before making
a final determination. In addition, if you enable the safelist/blocklist feature, end users (email users) can
exercise control over which messages are marked as spam.
Note
A system quarantine is distinct from a spam quarantine; it resides on an Email Security appliance and
holds quarantined messages based on various actions that AsyncOS performs, such as content filtering,
anti-virus scanning, and applying Outbreak Filters.
holds quarantined messages based on various actions that AsyncOS performs, such as content filtering,
anti-virus scanning, and applying Outbreak Filters.
A local Cisco IronPort Spam Quarantine resides on an Email Security gateway appliance. You can also
have messages sent to an external Cisco IronPort Spam Quarantine, which resides on a separate Cisco
IronPort appliance — typically a Security Management appliance.
have messages sent to an external Cisco IronPort Spam Quarantine, which resides on a separate Cisco
IronPort appliance — typically a Security Management appliance.
Note
You can implement end user access to the Cisco IronPort Spam Quarantine only for specified users or
groups of users. Also, after you initially implement end user access, you might later decide to disable
access if end users rarely view and release messages in the quarantine.
groups of users. Also, after you initially implement end user access, you might later decide to disable
access if end users rarely view and release messages in the quarantine.
You can configure AsyncOS to send a notification email to end users, informing them of quarantined
spam and suspected spam messages. The notification contains a summary of the messages currently in
the Cisco IronPort Spam Quarantine for that user. The user can view the messages and decide whether
to have them delivered to the Email Inbox or delete them. Users can also search through their quarantined
messages. Users can access the quarantine through the notification message, or they can access the
spam and suspected spam messages. The notification contains a summary of the messages currently in
the Cisco IronPort Spam Quarantine for that user. The user can view the messages and decide whether
to have them delivered to the Email Inbox or delete them. Users can also search through their quarantined
messages. Users can access the quarantine through the notification message, or they can access the